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jy^ . We analyze a model of interactive unawareness introduced by Heifetz, Meier and Schipper (HMS). 

We consider two axiomatizations for their model, which capture different notions of validity. These 
axiomatizations allow us to compare the HMS approach to both the standard (S5) epistemic logic and 
two other approaches to unawareness: that of Fagin and Halpern and that of Modica and Rustichini. 
We show that the differences between the HMS approach and the others are mainly due to the notion of 
validity used and the fact that the HMS is based on a 3-valued propositional logic. 
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O ■ 1 Introduction 

Reasoning about knowledge has played a significant role in work in philosophy, economics, and distributed 
' computing. Most of that work has used standard Kripke structures to model knowledge, where an agent 

knows a fact (p if ip is true in all the worlds that the agent considers possible. While this approach has 
proved useful for many applications, it suffers from a serious shortcoming, known as the logical omniscience 
Q\ \ problem (first observed and named by Hintikka [1962]): agents know all tautologies and know all the logical 

consequences of their knowledge. This seems inappropriate for resource-bounded agents and agents who 
are unaware of various concepts (and thus do not know logical tautologies involving those concepts). To 
take just one simple example, a novice investor may not be aware of the notion of the price-earnings ratio, 
although that may be relevant to the decision of buying a stock. 

There has been a great deal of work on the logical omniscience problem (see [Fagin, Halpern, Moses, 
and Vardi 1995] for an overview). Of most relevance to this paper are approaches that have focused on 
(lack of) awareness. Fagin and Halpern [1988] (FH from now on) were the first to deal with lack of model 



omniscience explicitly in terms of awareness. They did so by introducing an explicit awareness operator. 
Since then, there has been a stream of papers on the topic in the economics literature (see, for example, 
[Modica and Rustichini 1994; Modica and Rustichini 1999; Dekel, Lipman, and Rustichini 1998]). In these 
papers, awareness is defined in terms of knowledge: an agent is aware of p if he either knows p or knows that 
he does not know p. All of them focused on the single-agent case. Recently, Heifetz, Meier, and Schipper 
[2003] (HMS from now on) have provided a multi-agent model for unawareness. In this paper, we consider 
how the HMS model compares to other work. 

A key feature of the HMS approach (also present in the work of Modica and Rustichini [1999] — MR 
from now on) is that with each world or state is associated a (propositional) language. Intuitively, this is the 
language of concepts defined at that world. Agents may not be aware of all these concepts. The way that is 
modeled is that in all the states an agent considers possible at a state s, fewer concepts may be defined than 



* A preliminary version of this paper was presented at the Tenth Conference on Theoretical Aspects of Rationality and Knowl- 
edge (TARK05). 
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are defined at state s. Because a proposition p may be undefined at a given state s, the underlying logic in 
HMS is best viewed as a 3-valued logic: a proposition p may be true, false, or undefined at a given state. 

We consider two sound and complete axiomatizations for the HMS model, that differ with respect to the 
language used and the notion of validity. One axiomatization captures weak validity: a formula is weakly 
valid if it is never false (although it may be undefined). In the single-agent case, this axiomatization is 
identical to that given by MR. However, in the MR model, validity is taken with respect to "objective" state, 
where all formulas are defined. As shown by Halpern [2001], this axiomatization is also sound and complete 
in the single-agent case with respect to a special case of FH's awareness structures; we extend Halpern's 
result to the multi-agent case. The other axiomatization of the HMS model captures (strong) validity: a 
formula is (strongly) valid if it is always true. If we add an axiom saying that there is no third value to this 
axiom system, then we just get the standard axiom system for S5. This shows that, when it comes to strong 
validity, the only difference between the HMS models and standard epistemic models is the third truth value. 

The rest of this paper is organized as follows. In Section 2, we review the basic S5 model, the FH model, 
the MR model, and the HMS model. In Section 3, we compare the HMS approach and the FH approach, 
both semantically and axiomatically, much as Halpern [2001] compares the MR and FH approaches. We 
show that weak validity in HMS structures corresponds in a precise sense to validity in awareness structures. 
In Section 4, we extend the HMS language by adding a nonstandard implication operator. Doing so allows 
us to provide an axiomatization for strong validity. We conclude in Section 5. Further discussion of the 
original HMS framework and an axiomatization of strong validity in the purely prepositional case can be 
found in the appendix. 

2 Background 

We briefly review the standard epistemic logic and the approaches of FH, MR, and HMS here. 
2.1 Standard epistemic logic 

The syntax of standard epistemic logic is straightforward. Given a set {1, . . . , n} of agents, formulas are 
formed by starting with a set $ = {p, q, . . .} of primitive propositions as well as a special formula T 
(which is always true), and then closing off under conjunction (A), negation (->) and the modal operators Ki, 
i = 1, . . . , n. Call the resulting language C^{<^)} As usual, we define if V ijj and ip =^ V as abbreviations 
of -i(-Kf A -iV) an d V Y>, respectively. 

The standard approach to giving semantics to C„(&) uses Kripke structures. A Kripke structure for 
n agents (over is a tuple M = (£, ir, K\, . . . , K n ), where £ is a set of states, tt : £ x $ — > {0, 1} 
is an interpretation, which associates with each primitive propositions its truth value at each state in S, 
Ki : £ — > 2 s is a possibility correspondence for agent i. Intuitively, if t € /Q(s), then agent i considers 
state t possible at state s. Ki is reflexive if for all s G S, s G /Q(s); it is transitive if for all s,t G X, if 
t G /Q(s) then Ki(t) C /Q(s); it is Euclidean if for all s,t G S, if t G /Q(s) then /Q(t) 2 Ki{s)? A 
Kripke structure is reflexive (resp., reflexive and transitive; partitional) if the possibility correspondences 
Ki are reflexive (resp., reflexive and transitive; reflexive, Euclidean, and transitive). Let M n (&) denote 
the class of all Kripke structures for n agents over $, with no restrictions on the /Q relations. We use 
the superscripts r, e, and t to indicate that the Ki relations are restricted to being reflexive, Euclidean, 

1 In MR, only the single-agent case is considered. We consider the multi-agent here to allow the generalization to HMS. In many 
cases, T is defined in terms of other formulas, e.g., as ^(p A -<p). We take it to be primitive here for convenience. 

2 It is more standard in the philosophy literature to take Ki to be a binary relation. The two approaches are equivalent, since 
if IC'i is a binary relation, we can define a possibility correspondence /Q by taking t e /Q(s) iff (s,t) 6 /C^. We can similarly 
define a binary relation given a possibility correspondence. Given this equivalence, it is easy to see that the notions of a possibility 
correspondence being reflexive, transitive, or Euclidean are equivalent to the corresponding notion for binary relations. 
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and transitive, respectively. Thus, for example, M.^{^) is the class of all reflexive and transitive Kripke 
structures for n agents. 

We write (M, s) \= ip if ip is true at state s in the Kripke structure M. The truth relation is defined 
inductively as follows: 

(M, s) \= p, for p € <E>, if tt(s, p) = 1 

(m, s) \= ^ if (m, s) y= <p 

(M, s) \= ip A ip if (M, s) |= 9? and (M, s) |= V 
(M, s) \= Kiip if (M, s') \= ip for all s' € £;(s). 

A formula ip is said to be valid in Kripke structure M if (M, s) |= for all s£S. A formula 99 is valid 
in a class of Kripke structures, denoted M \= ip, if it is valid for all Kripke structures in M. 

An axiom system AX consists of a collection of axioms and inference rules. An axiom is a formula, and 
an inference rule has the form "from ip±, . . . , ip^. infer ip," where ipi, . . . , ip^, ip are formulas. A formula p 
is provable in AX, denoted AX h 99, if there is a sequence of formulas such that the last one is ip, and each 
one is either an axiom or follows from previous formulas in the sequence by an application of an inference 
rule. An axiom system AX is said to be sound for a language C with respect to a class M of structures if 
every formula provable in AX is valid with respect to J\f. The system AX is complete for C with respect to 
M if every formula in C that is valid with respect to M is provable in AX. 

Consider the following set of well-known axioms and inference rules: 

Prop. All substitution instances of valid formulas of prepositional logic. 

K. (K,p A Ki(p ^ 1P)) ^ KnP. 
T. => p. 

4. Kip^KiKip. 

5. ^Kip Ki^K-ip. 

MP. From p and p => ip infer ip (modus ponens). 
Gen. From p infer Kip. 

It is well known that the axioms T, 4, and 5 correspond to the requirements that the /Q relations are 
reflexive, transitive, and Euclidean, respectively. Let K„ be the axiom system consisting of the axioms 
Prop, K and rules MP, and Gen, and let S5 n be the system consisting of all the axioms and inference rules 
above. The following result is well known (see, for example, [Chellas 1980; Fagin, Halpern, Moses, and 
Vardi 1995] for proofs). 

Theorem 2.1: Let C be a (possibly empty) subset of {T,4, 5} and let C be the corresponding subset of 
{r, t, e}. Then K n U C is a sound and complete axiomatization of the language C^(^) with respect to 
M°(*). 

In particular, this shows that S5 n characterizes partitional models, where the possibility correspondences 
are reflexive, transitive, and Euclidean. 



3 



2.2 The FH model 



The Logic of General Awareness model of Fagin and Halpern [1988] introduces a syntactic notion of aware- 
ness. This is reflected in the language by adding a new modal operator Ai for each agent i. The intended 
interpretation of Aitp is "i is aware of p". The power of this approach comes from the flexibility of the 
notion of awareness. For example, "agent i is aware of ip" may be interpreted as "agent % is familiar with all 
primitive propositions in ip" or as "agent i can compute the truth value of p in time t". 

Having awareness in the language allows us to distinguish two notions of knowledge: implicit knowl- 
edge and explicit knowledge. Implicit knowledge, denoted with Ki, is defined as truth in all worlds the 
agent considers possible, as usual. Explicit knowledge, denoted with X; t , is defined as the conjunction of 
implicit knowledge and awareness. Let C^' X,A {^) be the language extending £^(3>) by closing off under 
the operators Ai and X it for i = 1, . . . , n. Let £^- A ($) (resp. be the sublanguage of £%' X ' A (®) 

where the formulas do not mention K±, . . . , K n (resp., K\, . . . , K n and A±, . . . A n ). 

An awareness structure for n agents over $ is a tuple M = (£, tt, K\, K n , Ai, ■ A n ), where 
(S, tt, /Ci, K. n ) is a Kripke structure and Ai is a function associating a set of formulas for each state, for 
i = 1, n. Intuitively, Ai(s) is the set of formulas that agent i is aware of at state s. The set of formulas 
the agent is aware of can be arbitrary. Depending on the interpretation of awareness one has in mind, certain 
restrictions on Ai may apply. There are two restrictions that are of particular interest here: 

• Awareness is generated by primitive propositions if, for all agents i, p G Ai(s) iff all the primitive 
propositions that appear in p are in Ai(s) n <£. That is, an agent is aware of p iff she is aware of all 
the primitive propositions that appear in tp. 

• Agents know what they are aware of if, for all agents /Q(s) implies that Ai(s) = Ai(t). 

Following Halpern [2001], we say that awareness structure is propositionally determined if awareness is 
generated by primitive propositions and agents know what they are aware of. 

The semantics for awareness structures extends the semantics defined for standard Kripke structures by 
adding two clauses defining Ai and Xi : 

(M,s) \= Aipii p G Ai{s) 

(M, s) \= Xip if (M, s) \= Ap and (M, s) \= K t p>. 
FH provide a complete axiomatization for the logic of awareness; we omit the details here. 

2.3 The MR model 

We follow Halpern's [2001] presentation of MR here; it is easily seen to be equivalent to that in [Modica 
and Rustichini 1999]. 

Since MR consider only the single-case, they use the language £f- (<£>). A generalized standard model 
(GSM) over $ has the form M = (S, S, tt, JC, p), where 

• S and S are disjoint sets of states; moreover, S = U^c^Sy, where the sets Sy are disjoint. Intuitively, 
the states in S describe the objective situation, while the states in S describe the agent's subjective 
view of the objective situation, limited to the vocabulary that the agent is aware of. 

• vr^x^^lO^jisan interpretation. 

• K : S —> 2 s is a generalized possibility correspondence. 
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• p is a projection from S to E such that (1) if p(s) = p(t) G 5$ then (a) s and i agree on the truth 
values of all primitive propositions in <I>, that is, n(s,p) = n(t,p) for all p G * and (b) K.(s) = )C(t) 
and (2) if G then JC(s) C 5^. Intuitively, is the agent's subjective state in objective 
state s. 

We can extend K, to a map (also denoted /C for convenience) defined on 5 U E in the following way: 
if s' G E and p(s) = s', define /C(s') = /C(s). Condition 1(b) on p guarantees that this extension is well 
defined. A GSM is reflexive (resp., reflexive and transitive; partitional) if K restricted to E is reflexive (resp., 
reflexive and transitive; reflexive, Euclidean and transitive). Similarly, we can extend tt to a function (also 
denoted tt) defined on S U E: if s' G Sy, p 6 $ and p(s) = s', define tt(s',p) = ir(s,p); and if s' G Sq, 
andp £ define ir(s',p) = 1/2. 

With these extensions of K and tt, the semantics for formulas in GSMs is identical to that in standard 
Kripke structures except for the negation, which is defined as follows: 

if s G S, then (M, s) \= -up iff (M, s) ^ ip 

if s G S 1 *, then (M, s) \= -up iff (M, s) ^ and G £f (*). 

Note that for states in the "objective" state space S, the logic is 2-valued; and every formula is either true or 
false. On the other hand, for states in the "subjective" state space E the logic is 3-valued. A formula may be 
neither true nor false. It is easy to check that if s G Sy, then every formula in Ci(^) is either true or false at 
s, while formulas not in Cf(^) are neither true nor false. Intuitively, an agent can assign truth values only 
to formulas involving concepts he is aware of; at states in Sy, the agent is aware only of concepts expressed 
in the language Cf- (*). 

The intuition behind MR's notion of awareness is that an agent is unaware of <p if he does not know ip, 
does not know he does not know it, and so on. Thus, an agent is aware of ip if he either knows p> or knows 

he does not know ip, or knows that he does not know that he does not know ip, or MR show that under 

appropriate assumptions, this infinite disjunction is equivalent to the first two disjuncts, so they define Atp 
to be an abbreviation of Kip V K^Kip. 

Rather than considering validity, MR consider what we call here objective validity: truth in all objective 
states (that is, the states in S). Note that all classical (2-valued) prepositional tautologies are objectively 
valid in the MR setting. MR provide a system U that is a sound and complete axiomatization for objective 
validity with respect to partitional GSM structures. The system U consists of the axioms Prop, T, and 4, the 
inference rule MP, and the following additional axioms and inference rules: 

M. K(<p A ip) Kip A Kip. 
C. Kip A Kip K(ip A ip). 
A. ^4.92 <^ A-np. 
AM. A(<p A ip) => A<p A Atp. 
N. KT. 

RE sa . From ip 44> ip infer Kip ^ Kip, where ip and ip contain exactly the same primitive propositions. 

Theorem 2.2: [Modica and Rustichini 1999] U is a complete and sound axiomatization of objective validity 
for the language (<3?) with respect to partitional GSMs over $. 
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2.4 The HMS model 



HMS define their approach semantically, without giving a logic. We discuss their semantic approach in 
the appendix. To facilitate comparison of HMS to the other approaches we have considered, we define an 
appropriate logic. (In recent work done independently of ours [Heifetz, Meier, and Schipper 2005], HMS 
also consider a logic based on their approach, whose syntax and semantics is essentially identical to that 
described here.) 

Given a set <I> of primitive propositions, consider again the language C^(^). An HMS structure for 
n agents (over 3>) is a tuple M = (£, /Ci, . . . , /C n , ir, {pq,>^ : $ C f ' C $}), where (as in MR), £ = 
U$c$<S'* is a set of states, tt : S x $ — ► {0, 1, 1/2} is an interpretation such that for s G Sy, 7r(s,p) / 1/2 
iff p G * (intuitively, all primitive propositions in ^ are defined at states of Sy), and py^ maps SV onto 
S\&. Intuitively, p^'^(s) is a description of the state s G SV in the less expressive vocabulary of Sq,. 
Moreover, if *i C * 2 Q *3, then p^ 3 ,* 2 o p* 2i * 1 = p^,^- Note that although both MR and HMS 
have projection functions, they have slightly different intuitions behind them. For MR, p(s) is the subjective 
state (i.e., the way the world looks to the agent) when the actual objective state is s. For HMS, there is no 
objective state; p^'^(s) is the description of s in the less expressive vocabulary of S^,. For B C Sq/ 2 , let 
p^ 2 ^ 1 {B) = {p* 2 ,*i( s ) : s ^ B}- Finally, the |= relation in HMS structures is defined for formulas in 
C% ($) in exactly the same way as it is in subjective states of MR structures. Moreover, like MR, Anp is 
defined as an abbreviation of V K^Kup. 

Note that the definition of \= does not use the functions py^i. These functions are used only to impose 
some coherence conditions on HMS structures. To describe these conditions, we need a definition. Given 
B C Sq,, let 2?T = U^o^p^/ 1 ^(B). Thus, we can think of B^ as the states in which B can be expressed. 

1. Confinedness: If s G then JCi{s) C Sqi for some \P' C ^. 

2. Generalized reflexivity: s G /Q(s)^ for all s G S. 

3. Stationarity: s' G /Q(s) implies 

(a) /Q(s') C /Ci(s); 

(b) /Q(s') D /Q(s). 

4. Projections preserve knowledge: If^i C ty 2 Q *&3,s G 5^ 3 , and /Q(s) C S , $ 2 ,then/9$ 2; ^ 1 (/Ci(s)) = 

^i(P*3,*i( s ))- 

5. Projections preserve ignorance: If s G SV and Vl/ C then (Xj(s))^ C (/Cj(p^/ ; ^(s)))^. 3 

We remark that HMS combined parts (a) and (b) of stationarity into one statement (saying K-i(s) = 
JCi(s')). We split the condition in this way to make it easier to capture axiomatically. Roughly speaking, 
generalized reflexivity, part (a) of stationarity, and part (b) of stationarity are analogues of the assumptions 
in standard epistemic structures that the possibility correspondences are reflexive, transitive, and Euclidean, 
respectively. The remaining assumptions can be viewed as coherence conditions. See [Heifetz, Meier, and 
Schipper 2003] for further discussion of these conditions. 

If C is a subset of {r, t, e}, let H^i^) denote the class of HMS structures over $ satisfying confinedness, 
projections preserve knowledge, projections preserve ignorance, and the subset of generalized reflexivity, 
part (a) of stationarity, and part (b) of stationarity corresponding to C. Thus, for example, TC^{^) is the 
class of HMS structures for n agents over <3? that satisfy confinedness, projections preserve knowledge, 

3 HMS explicitly assume that /Q(s) / for all s 6 E, but since this follows from generalized reflexivity we do not assume it 
explicitly. HMS also mention one other property, which they call projections preserve awareness, but, as HMS observe, it follows 
from the assumption that projections preserve knowledge, so we do not consider it here. 
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projections preserve ignorance, generalized reflexivity, and part (a) of stationarity. HMS consider only 
"partitional" HMS structures, that is, structures in TC' n te (<&). However, we can get more insight into HMS 
structures by allowing the greater generality of considering non-partitional structures. 

3 A Comparison of the Approaches 

As a first step to comparing the MR, HMS, and FH approaches, we recall a result proved by Halpern. 

Lemma 3.1: [Halpern 2001, Lemma 2.1] If M is a partitional awareness structures where awareness is 
generated by primitive propositions, then 

M |= Anp & (A> V (^Xi<p A X^Xnp)). 

Halpern proves this lemma only for the single-agent case, but the proof goes through without change for the 
multi-agent case. Note that this equivalence does not hold in general in non-partitional structures. 

Thus, if we restrict to partitional awareness structures where awareness is generated by primitive propo- 
sitions, we can define awareness just as MR and HMS do. 

Halpern [2001, Theorem 4.1] proves an even stronger connection between the semantics of FH and MR, 
essentially showing that partitional GSMs are in a sense equivalent to propositionally determined awareness 
structures. We prove a generalization of this result here. 

If C is a subset of {r, t, e}, let Nn' pd {&) and J\f£' P9 denote the set of propositionally determined aware- 
ness structures over and the set of awareness structures over <& where awareness is propositionally gen- 
erated, respectively, whose /Q relations satisfy the conditions in C. Given a formula p> G (<!>), let 
ipx G £n(^) be the formula that results by replacing all occurrences of K- L in ip by X{. Finally, let ^ be 
the set of primitive propositions appearing in p. 

Theorem 3.2: Let C be a subset of{r, t, e}. 

(a) If M = (E, K.i, . . . , )C n , 7r, {p*' ; ^ : \£ C vp' C <£}) e Ti^i^), then there exists an awareness 
structure M' = (E, JC[, . . . , K' n , tt', Ai, ■ ■ ■ , An) G A/"^' ra ($) such that, for all (p € if 
s £ Sty and & v C \I>, then (M, s) \= <p iff(M', s) \= ipx- Moreover, if C n {t, e} 7^ 0, then we can 
take M' € M^' pd . 

(b) If M = (S, JCi, . . . , JC n , 7r, Ai, . . . , A n ) G Nn' pd {$), then there exists an HMS structure M' = 
(E',£i, . . . , JC' n ,7r', {puf,^ : * C C $}) G such that £' = E x 2* 5* = E x {^} 
for all * C $, and, for all tp G C%($), if C % then (M, s) \= tp x iff (M', (s, *)) |= p. If 
{t, e} n C = 0, the result holds even if M G (M r ^ P9 (^) - M^' pd (^)). 

It follows immediately from Halpern's analogue of Theorem 3.2 that p is objectively valid in GSMs iff 
px is valid in propositionally determined partitional awareness structures. Thus, objective validity in GSMs 
and validity in propositionally determined partitional awareness structures are characterized by the same set 
of axioms. 

We would like to get a similar result here. However, if we define validity in the usual way — that is, p 
is valid iff (M, s) \= tp for all states s and all HMS structures M — then it is easy to see that there are no 
(non-trivial) valid HMS formulas. Since the HMS logic is three-valued, besides what we will call strong 
validity (truth in all states), we can consider another standard notion of validity. A formula is weakly valid 
iff it is not false at any state in any HMS structure (that is, it is either true or undefined at every state in every 
HMS structure). Put another way, p> is weakly valid if, at all states where p> is defined, p is true. 
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Corollary 3.3: If C C {r, i, e} ?/zera 
(a) ifC n {i, e} = 0, ?/zera </? z's weakly valid in 7Y^(<I>) #<^x « valid in A/"^' P9 ($); 
(fc) ifC n {t, e} / 0, then f is weakly valid in H%(<!>) iff fx is valid in J\f^' pd (^). 

Halpern [2001] provides a sound and complete axiomatizations for the language C 1 ' ($>) with respect 
to Af ' pd (Q), where C is either 0, {r}, {r, t} and {r, e, t}. It is straightforward to extend his techniques to 
other subsets of {r, e, t} and to arbitrary numbers of agents. However, these axioms involve combinations 
of Xi and A; L \ for example, all the systems have an axiom of the form Xf A X(f =4> tp) A Aip =4> Xtp. There 
seems to be no obvious axiomatization for that just involves axioms in the language except 

for the special case of partitional awareness structures, where Ai is definable in terms of Xi (see Lemma 3.1), 
although this may simply be due to the fact that there are no interesting axioms for this language. 

Let S5^ be the n-agent version of the axiom system S5x that Halpern proves is sound and complete for 
with respect to 7V^ e * ,pd (<I>) (so that, for example, the axiom Xff\X(f => i/))Ai?/) => X^becomes 
Xif A Xi(f =>■ ip) A Aitp =>■ Xitp, where now we view A{f as an abbreviation for Xif V X^Xif). Let 
S5^" be the result of replacing all occurrences of Xi in formulas in S5^ by Ki. Similarly, let U n be the 
n-agent version of the axiom system U together with the axiom AiKjip 44> Aif, 4 and let be the result 
of replacing all instances of Ki in the axioms of U n by X^. HMS have shown that there is a sense in which a 
variant of U n (which is easily seen to be equivalent to U n ) is a sound and complete axiomatization for HMS 
structures [Heifetz, Meier, and Schipper 2005]. Although this is not the way they present it, their results 
actually show that U n is a sound and complete axiomatization of weak validity with respect to 7-^ e *(<I>). 

Thus, the following is immediate from Corollary 3.3. 

Corollary 3.4: U n and S5^ are both sound and complete axiomatization of weak validity for the language 
(3>) with respect to 7Y^ e *(<l>); lA* and S5% are both sound and complete axiomatizations of validity for 
the language with respect to ,A/£ et ' pd (<J>). 

We can provide a direct proof that U n and S5^f (resp., and S5^) are equivalent, without appealing 
to Corollary 3.3. It is easy to check that all the axioms of are valid in M^ et ' pd (^) and all the inference 
rules of preserve validity. From the completeness of S5^ proved by Halpern, it follows that anything 
provable in is provable in S5^, and hence that anything provable in U n is provable in S5^. Similarly, 
it is easy to check that all the axioms of S5^- are weakly valid in 7Y™*($), and the inference rules preserve 
validity. Thus, from the results of HMS, it follows that everything provable in S5^ is provable in U n (and 
hence that everything provable in S5^ is provable in )• 

These results show a tight connection between the various approaches. U is a sound and complete ax- 
iomatization for objective validity in partitional GSMs; U n is a sound and complete axiomatization for weak 
validity in partitional HMS structures; and is a sound and complete axiomatization for (the standard no- 
tion of) validity in partitional awareness structures where awareness is generated by primitive propositions 
and agents know which formulas they are aware of. 

4 Strong Validity 

We say a formula is (strongly) valid in HMS structures if it is true at every state in every HMS structure. 
We can get further insight into HMS structures by considering strong validity. However, since no nontrivial 
formulas in C% W we valid in HMS structures, we must first extend the language. We do so by adding a 

4 The single-agent version of this axiom, AKip Aip, is provable in U, so does not have to be given separately. 
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nonstandard implication operator to the language. 5 Given an HMS structure M, define \p\m = {s : 
(M, s) |= 99}; that is, [99] m is the set of states in M where ip is true. Roughly speaking, we want to define 
<^-> in such a way that if [<^]m C [-0]m, then 99 ^ is valid in M. The one time when we do not necessarily 
want this is if ipu = 0- For example, we definitely do not want r V (p A ->p) ^ r V (g A ->q) to be valid 
(since rV(pA -ip) will be true at a state where r is true, p is defined, and q is undefined, while r A (g A -<</) 
is undefined at such a state). Thus, it seems unreasonable to have p A ->p g A ->q be valid, even though 
[p A ->p]m = 0. If \<p\m = 0» we take ip <^-> V to be valid only if ^ is at least as defined as 99. Since the set 
of states where ip is defined in M is [^]m U [ _i V'1m, this condition becomes [->^>]m C \iP\m U [-'V'l M- 

Let £^'^(<&) be the language that results by closing off under <^-> in addition to -1, A, and iv"i, . . . , K n ; 
let £^(<E>) be the prepositional fragment of the language. We cannot use the MR definition of negation 
for since ip ip may be defined even in states where ip and ip are not defined. (For example, 

p ^ pis true in all states, even in states where p is not defined.) Thus, we must separately define the truth 
and falsity of all formulas at all states, which we do as follows. In the definitions, we use (M, s) \=^p as 
an abbreviation of (M, s) \£ ip and (M, s) \/= ->tp; and (M, s) |=|</? as an abbreviation of (M, s) |= or 



(M, s) \= -<p (so (M, s) \=]ip iff y is neither true nor false at s, i.e., it is undefined at s). 


(M,s) 


NT 


(M,s) 


¥= _,T 


(M,s) 


\=pif n(s,p) = 1 


(M,s) 


|= ~^p if 7r(s,p) = 


(M,s) 


|= -.-.</? if (M, s) ^p 


(M,s) 


\= p A ip if (M, s) |= and (M, s) |= ip 


(M,s) 


\= ^(99 A ^) if either (M, s) |= -up A ip or (M, s) \= (p A -up or (M, s) |= -.99 A ->V 


(M,s) 


|= (99 ^ V) if either (M, s) \= p Aip or (M, s) \=^p or (M, s) |= ^99 A lip 


(M,s) 


\= ^(99 ^ ip) if (M, s) |= 99 A 


(M,s) 


|= ^99 if (M, s) |=J,v3 and (M, t) |= 99 for all t € /Q(s) 


(M,s) 


|= ->Kiy> if (M, s) ^ and (M, s) |=|p. 



It is easy to check that this semantics agrees with the MR semantics for formulas in £^(<E>). Moreover, the 
following lemma follows by an easy induction on the structure of formulas. 

Lemma 4.1: If \l/ C VP', every formula in C^^i^f) ^ defined at every state in SV- 

It is useful to define the following abbreviations: 

• p # is an abbreviation of (99 ip) A (ip 99); 

• 99 = 1 is an abbreviation of -1(99 <^-> ->T); 

• 99 = is an abbreviation of -i(-xp ->T); 

• 99 = i is an abbreviation of (99 -TT) A (-199 <^-> ->T). 

Using the formulas 99 = 0, 99 = i, and 99 = 1, we can reason directly about the truth value of formulas. 
This will be useful in our axiomatization. 

5 We remark that a nonstandard implication operator was also added to the logic used by Fagin, Halpern, and Vardi [1995] for 
exactly the same reason, although the semantics of the operator here is different from there, since the underlying logic is different. 
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In our axiomatization of £^ ,t_> ($) with respect to HMS structures, just as in standard epistemic logic, 
we focus on axioms that characterize properties of the /Q relation that correspond to reflexivity, transitivity, 
and the Euclidean property. 

Consider the following axioms: 

Prop'. All substitution instances of formulas valid in C~*(3>). 
K'. Knp A Ki((p ^ V)) ^ Kiil>. 

r. Kw^tpv y {p:pe * v} = 1/2). 

4'. Ki<p KiKi<p. 

5'. ^K^Kiip (tf i¥ >) V ^(99 = 1/2). 

Confl. O = 1/2) ^ Ki{(p = 1/2) if 99 G ($). 

Conf2. -iffi^ = 1/2) ^ Ki((tp V ^99) = 1). 

Bl. (Kiif) = 1/2 ^ 99 = 1/2. 

B2. ((99 = V 99 = 1) A ^(99 = 1)) (^99) = 1. 

MP'. From 99 and 99 V infer ■0. 

A few comments regarding the axioms: Prop', K', T', 4', 5', and MP' are weakenings of the corre- 
sponding axioms and inference rule for standard epistemic logic. All of them use rather than =>; in 
some cases further weakening is required. We provide an axiomatic characterization of Prop' in the ap- 
pendix. A key property of the axiomatization is that if we just add the axiom 99 / 1/2 (saying that all 
formulas are defined), we get a complete axiomatization of classical logic. T (with => replaced by 
is sound in HMS systems satisfying generalized reflexivity for formulas 99 in £^($). But, for example, 
Ki(p = 1/2) p = 1/2 is not valid; p may be defined (i.e., be either true or false) at a state s and 
undefined at all states s' G Note that axiom 5 is equivalent to its contrapositive ^K^Kup =4> Kiip. 

This is not sound in its full strength; for example, if p is defined at s but undefined at the states in /Cj(s), 
then (M, s) |= -1.fQ-1.fQp A ->Kip. Axioms Confl and Conf2, as the names suggest, capture confinedness. 
We can actually break confinedness into two parts. If s G Sy, the first part says that each state s' G /Q(s) 
is in some set SV such that C v]/. i n particular, that means that a formula in (<&) that is undefined at 
s must be undefined at each state in K-i(s). This is just what Confl says. Note that Confl does not hold for 
arbitrary formulas; for example, if p is defined and q is undefined at s, and both are undefined at all states 
in /Q(s), then (M, s) \= (p q) = 1/2 A -iiQ((p q) = 1/2). The second part of confinedness says 
that all states in /Q(s) are in the same set S-q//. This is captured by Conf2, since it says that if 99 is defined at 
some state in /Q(s), then it is defined at all states in /Cj(s). Bl and B2 are technical axioms that capture the 
semantics of Knp. 6 

Let AX^' W be the system consisting of Prop', K', Bl, B2, Confl, Conf2, MP', and Gen. 

Theorem 4.2: Let C be a (possibly empty) subset of {T', 4', 5'} and let C be the corresponding subset of 
{r, t, e}. Then AXf'^ U C is a sound and complete axiomatization of the language C^'^(^) with respect 

6 We remark that axiom B2 is slightly modified from the preliminary version of the paper. 
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Theorem 4.2 also allows us to relate HMS structures to standard epistemic structures. It is easy to check 
that if C is a (possibly empty) subset of {T 7 , 4', 5'} and C is the corresponding subset of {r, e, t}, all the 
axioms of AXf' w UC are sound with respect to standard epistemic structures M^(^). Moreover, we get 
completeness by adding the axiom tp ^ 1/2, which says that all formulas are either true or false. Thus, in a 
precise sense, HMS differs from standard epistemic logic by allowing a third truth value. 

5 Conclusion 

We have compared the HMS approach and the FH approach to modeling unawareness. Our results show 
that, as long as we restrict to the language £^($>), the approaches are essentially equivalent; we can translate 
from one to the other. We are currently investigating extending the logic of awareness by allowing awareness 
of unawareness [Halpern and Rego ], so that it would be possible to say, for example, that there exists a fact 
that agent 1 is unaware of but agent 1 knows that agent 2 is aware of it. This would be expressed by the 
formula 3p{->A\p A X1A2P). Such reasoning seems critical to capture what is going on in a number of 
games. Moreover, it is not clear whether it can be expressed in the HMS framework. 
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A The Original HMS Approach 

HMS describe their approach purely semantically, without giving a logic. We review their approach here 
(making some inessential changes for ease of exposition). An HMS frame for n agents is a tuple (S, /Ci, . . . , 
IC n , (A, {pp tCl : a, (3 G A, a ^ /?}), where: 

• A is an arbitrary lattice, partially ordered by ^; 

• /Ci, . . . , K, n are possibility correspondences, one for each agent; 

• £ is a disjoint union of the form U a e&S a ; 

• if a -< (3, then pp :Ct : Sp — > S a is a surjection. 

In the logic-based version of HMS given in Section 2.4, A consists of the subsets of <£, and \l/ ^ ty' iff 
C Thus, the original HMS definition can be viewed as a more abstract version of that given in 
Section 2.4. 

Given B C S a , let = U{p. a <p}Pp We can think of B^ as the states in which B can be 
expressed. HMS focus on sets of the form B\ which they take to be events. 

HMS assume that their frames satisfy the five conditions mentioned in Section 2.4, restated in their more 
abstract setting. The statements of generalized reflexivity and stationarity remain the same. Confinedness, 
projections preserve knowledge, and projections preserve ignorance are stated as follows: 

• confinedness: if s G Sp then /Q(s) C S a for some a < (5\ 

• projections preserve knowledge: if a < (3 ^ 7, s G 5 7 , and 1Ci(s) C Sp, then /9g, a (/Q(s)) = 
^i(p 7 ,a(s)); 

• projections preserve ignorance: if s G Sp and a ^ /3 then (/Q(s))^ C (jCi{pp^ a {s))Y . 

HMS start by considering the algebra consisting of all events of the form B^ . In this algebra, they 
define an operator -. by taking ^(5 T ) = (S a - 5) T for ^ B C S 1 ,,. With this definition, ^B^ = S T if 
S ^ {0,S' a }. However, it remains to define — i0T. We could just take it to be S, but then we have -i-i-S^ = S, 
rather than — = S^. To avoid this problem, in their words, HMS "devise a distinct vacuous event s "" 
for each subspace S a , extend the algebra with these events, and define -iS^ = s " and -i0 s ' a = S^. They 
do not make clear exactly what it means to "devise a vacuous event". We can recast their definitions in the 
following way, that allows us to bring in the events s " more naturally. 

In a 2- valued logic, given a formula ip and a structure M, the set \<p\m of states where tp is true and the 
set [-!<£>] m of states where p is false are complements of each other, so it suffices to associate with p only 
one set, say \p\ m- In a 3- valued logic, the set of states where p is true does not determine the set of states 
where p is false. Rather, we must consider three mutually exclusive and exhaustive sets: the set where p is 
true, the set where p is false, and the set where p is undefined. As before, one of these is redundant, since it 
is the complement of the union of the other two. Note that if p is a formula in the language of HMS, the set 
\p\u is either or an event of the form B\ where B C In the latter case, we associate with p the pair 
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of sets (B\ (S a — B)1), i.e., ([<£>]m, ["'V'Im)- In the former case, we must have [-^Jm = S£ for some 
a, and we associate with tp the pair (0, Thus, we are using the pair (0, 5|) instead of devising a new 
event ® Sa to represent [92] m in this case. 7 

HMS use intersection of events to represent conjunction. It is not hard to see that the intersection of 
events is itself an event. The obvious way to represent disjunction is as the union of events, but the union 
of events is in general not an event. Thus, HMS define a disjunction operator using de Morgan's law: 
F V E' = -i(-iE n ->E'). In our setting, where we use pairs of sets, we can also define operators ~ and n 
(intuitively, for negation and intersection) by taking ~ (E, E 1 ) = (E', E) and 

(E, E 1 ) n (F, F') = (F n F, (F n F') U (E' n F) u (E' n F')). 

Although our definition of n may not seem so intuitive, as the next result shows, (E, E') n (F, F') is 
essentially equal to (E n F, -i(F n F)). Moreover, our definition has the advantage of not using -1, so it 
applies even if E and F are not events. 

Lemma A.l: If (E U E') = S\ and (F U F') 

(E n F') u {E' n F) u (E' n F') = ■ 



Sp, then 

->(E n F) if(EC\F)^$, 
S] (F n F) = and 7 = sup(a, j3). 



Proof: Let I be the set (EnF)U(En F') U (E' n F) U (E' n F'). We first show that / = S], where 
7 = sup(a, (3). By assumption, E = for some 5 C S a , and F = C T for some C C Sjj. Suppose 
that s £ L We claim that s e S$, where a ^ <5 and (3^5. Suppose, by way of contradiction, that 
a 2< 5. Then s^ELlE',sos^I,a contradiction. A similar argument shows that (3 < 5. Thus 7^5 
and s G S^. For the opposite inclusion, suppose that s G S*j. Since a ■< 7 and /3 ^ 7, the projections 
p 7)Q (s) and /9 7ij( j(s) are well defined. Let X = I? if p 7)Q (s) € -B and X = E' otherwise. Similarly, let 
F = F if p 7)/ g(s) G C and Y = F' otherwise. It is easy to see that s G (X n Y) C /. It follows that 
(£ n F') U (F' n F) U (F' n F') = 5 7 - (F n F). The result now follows easily. | 

Finally, HMS define an operator Kj corresponding to the possibility correspondence /Q. They define 
Kj(F) = {s : /Q(s) C F}, 9 and show that Kj(F) is an event if F is. In our setting, we define 

Ki((E, E')) = ({s : JCi(s) C F} n (F U F'), (F U F') - {s : /C 4 (s) C F}). 

Essentially, we are defining Kj((F, F')) as (Kj(F), -iKj(F)). Intersecting with FUF' is unnecessary in the 
HMS framework, since their conditions on frames guarantee that Kj(F) C F U E'. If we think of (F, F') 
as ([<£>]m, [ _, V 9 ]m), then ip is defined on F U E'. The definitions above guarantee that Kiip is defined on the 
same set. 

HMS define an awareness operator in the spirit of MR, by taking Aj (F) to be an abbreviation of Kj (F) V 
Kj-iKj(F). They then prove a number of properties of knowledge and awareness, such as Kj(F) C KjKj(F) 
and Aj(-iF) = Aj(F). 

The semantics we have given for our logic matches that of the operators defined by HMS, in the sense 
of the following lemma. 

7 In a more recent version of their paper, HMS identify a nonempty event E with the pair (E, S), where, for E = B\ S is the 
unique set S a containing B. Then s can be identified with (0, S). While we also identify events with pairs of sets and s with 
(0, S), our identification is different from that of HMS, and extends more naturally to sets that are not events. 
Note that sup(a, (5) is well defined since A is a lattice. 

9 Actually, this is their definition only if {s : Jd(s) C E} 0; otherwise, they take Ki(E) = S ° if E = B ] for some 
B C S a . Wedo not need a special definition if {s : /Cj(s) C E} = using our approach. 
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Lemma A.2: For all formulas ip, ip G a«<i a// //MS structures M. 

(a) (Mm, [—^m) = ~ (Mm, Mm)) 

W (fo> A V]m, A iP)j M ) = (Mm, Mm) n (Mm, HM- 

fcj ([^Mm, [-^Mm) = ^((Hm, Mm)) 

Proof: Part (a) follows easily from the fact that ~ (Mm, ["^Im)) = ([""^Jm), Mm) and [-i-Mm = 
Mm. 

For part (b), note that 

(Mm, MmMMm, I-V'Im) = (MmhWm, (MMnN]M)u(HMnM M )u(NMnM M )). 

Now the result is immediate from the observation that Mm H [V>]m = [</? A V>]m and 

(Mm n HVIm) u (Hv?]m n [fl M ) u (Mm n Mm) = a V)]m- 

For (c), by definition of Kj, 

Ki((HM, Mm)) = ({* : Ki{s) C MM}n(MMU[^] M ), (HmUHm)-{ S : /Q(s) C Mm})- 

Note that t G (Mm U Mm) iff (M,t) K<A and * e {s : /Q(s) C Mm} iff for all t' G 
(M,f) |= p. Thus, i G {s : /Q(s) C Mm} n (Mm U Mm) iff (M,t) |= tf i¥ >, i.e., iff t G [K^] M . 
Similarly, i G (Mm U Mm) - {s : /Ci(s) C Mm} iff (M,t) and (M,t) £ i-e., iff 

(M,t) (= ->Ki(p. Hence, t G [-/y~Mm- I 

Note that Lemma A.2 applies even though, once we introduce the <^-» operator, Mm is not in general 
an event in the HMS sense. (For example, [p (?]m is not in general an event.) 

B An Axiomatization of £"~ > ($) 

Note that the formulas ip = 0, ip = \, and p = 1 are 2-valued. More generally, we define a formula p to 
be 2-valued if (<£> = 0) V (ip = 1) is valid in all HMS structures. Because they obey the usual axioms of 
classical logic, 2-valued formulas play a key role in our axiomatization of £^($). We say that a formula is 
definitely 2-valued if it is in the smallest set containing T and all formulas of the form ip = k which is closed 
under negation, conjunction, nonstandard implication, and Ki, so that if p and ip are definitely two-valued, 
then so are -199, p A ip, p' <^-> ip (for all p'), and Kip. Let D2 denote the set of definitely 2-valued formulas. 
The following lemma is easy to prove. 

Lemma B.l: If p is definitely 2-valued, then it is 2-valued. 

Let AX 3 consist of the following collection of axioms and inference rules: 

P0. T. 

PI. {<p Aip) # -1(99 -iip) if ip, ip G D 2 . 
P2. ip ^ (ip ^ <p) if ip, ip G L> 2 - 

P3. (V> ^)) ^ (fa V) ^ fa ^ v?')) if ^ <S e ^2- 

P4. (93 V) ^ (fa ^ ^VO ^ ^V 3 ) if tp, ip G A2. 
P5. {p A V) = 1 ^ fa = 1) A (ip = 1). 
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P6. (<p A ip) = # (99 = A -^(ip = 1/2)) V (-.(p = 1/2) A V = 0). 

P7. 99 = 1 ^ (-.99) = 0. 

P8. 99 = v± (->¥>) = 1. 

P9. (99 V) = 1 # ((v? = A -.(V> = 1/2)) V (99 = 1/2) V (99 = 1 A V = !))• 

P10. (ip ^ ip) = # (92 = 1 A ip = 0). 

Pll. (99 = V 99 = 1/2 V 93 = 1) A (-<</? = i A if = j)), for i, j G {0, 1/2, 1} and i / j. 

Rl. From 99 = 1 infer 99. 

MP'. From 99 and 90 ip infer ?/>. 

It is well known that P0-P4 together with MP' provide a complete axiomatization for classical 2-valued 
prepositional logic with negation, conjunction, implication, and T. 10 Axioms P5-P10 are basically a trans- 
lation to formulas of the semantics for conjunction, negation and implication. 

Note that all the axioms of AX3 are sound in classical logic (all formulas of the form 99 = 1/2 are 
vacuously false in classical logic). Moreover, it is easy to show that if we add the axiom -1(99 = 1/2) to 
AX3, we get a sound and complete axiomatization of classical prepositional logic (although many axioms 
then become redundant). 

Theorem B.2: AX3 is a sound and complete axiomatization of C~" '($). 

Proof: The proof that the axiomatization is sound is a straightforward induction on the length of the proof 
of any theorem 99. We omit the details here. For completeness, we need to show that a valid formula 
99 G £ t_> ($) is provable in AX3. We first prove that 99 = 1 is provable in AX3 using standard techniques, 
and then apply Rl to infer 99. We proceed as follows. 

Given a set Q of formulas, let AG = A^eG A set Q of formulas is AX-consistent, if for all finite 
subsets Q' C Q, AX \f ->(A{7')- A set Q of formulas is maximal AX-consistent if Q is AX-consistent and for 
all 99 ^ Q, Q U {99} is not AX-consistent. 

Lemma B.3: If Q is an AX-consistent subset of Q' , then Q can be extended to a maximal AX-consistent 
subset of Q' . 

Proof: The proof uses standard techniques. Let ipi, ip2, • • • be an enumeration of the formulas in Q' . Define 
F = Q and Fj = Fj_i U {ipi} if Fj_i U {ipi} is AX-consistent and Fj = F_i, otherwise. Let T = 
U^ Fj. We claim that T is an maximal AX-consistent subset of Q 1 . Suppose that ip G Q' and ip £ T. By 
construction, we have tp = tpk for some k. If F^-i U {ipk} were AX-consistent, then ipk would be in F& 
and hence tpk would be in T. Since ipk = ip £ J 7 , we have that F^_i U {ip} is not AX-consistent and hence 
T U {ip}, is not AX-consistent. | 

The next lemma shows that maximal AX3 -consistent sets of definitely 2-valued formulas satisfy essen- 
tially the same properties as maximal classically consistent sets of formulas. 

Lemma B.4: Let AX be any axiom system that includes AX3. For all maximal AX-consistent subsets T of 
D2, the following properties hold: 

(I) for every formula 99 G D2, exactly one of ip and -199 is in T; 

10 We remark that we included formulas of the form Ktip among the formulas that are definitely 2-valued. While such formulas 
are not relevant in the axiomatization of (<£>), they do play a role when we consider the axiom Prop' in AX^'"A which applies 
to instances in the language £%'^ ($) of valid formulas of C"^ (<&). 
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(2) for every formula 99 £ C~^{<&), exactly one off = 0, <p = 1/2, and ip = 1 is in J 7 ; 

(3) if (px, ... ,(p k ,ij) e D 2 , <pi,... ,<Pk S T, and AX 3 h (991 A . . . A ip k ) ^ ty, then ip £ J 7 ; 

(4) (<pAip) = l£j 7 iff(p = l£j 7 and ip = 1 £ J 7 ; 

(5) (if A ip) = € J 7 iff either ip = £ J 7 and ip = 1/2 ^ J 7 , or ip = £ J 7 and <p = 1/2 ^ J 7 ; 

(6) iP = l£j 7 iff(^)=0£T; 

(7) $ = 0Z Tiff {-*!>) = \ZF; 

(8) (99 <^-> ip) = 1 € .F iff either <p = £ J 7 and ip = 1/2 J 7 ; or <p = 1/2 £ J 7 ; or tp = 1 £ J 7 and 
ip = 1 £ J 7 ; 

(9) (ip ^ ip) = € J 7 iff f = 1 £ T and ip = € J 7 ; 
(10) if ip £ Z?2 and AX h 99, ?/^« 99 € JF; 

Proof: First, note that axioms P0-P4 and MP' guarantee that classical prepositional reasoning can be used 
for formulas in D 2 . We thus use classical prepositional reasoning with minimal comment. 

For (1), we first show that exactly one of J 7 U {99} and J 7 U {-^} is AX-consistent. Suppose that 
J 7 U {99} and J 7 U {~«p} are both AX-consistent. Then ip £ J 7 and ^99 £ J 7 . Since ^(99 A -199) <G D2, 
AX I — 1(99 A -199), but this is a contradiction since J 7 is AX-consistent. Now suppose that neither J 7 U {99} 
nor J 7 U {-199} is AX-consistent. Then there exist finite subsets H\,H 2 C T such that AX I — 1(99 A (AH\)) 
and AX I — i(-np A (AH 2 )). Let G = H\\JH 2 . By classical prepositional reasoning, AX I — 1(99 A (AG)) and 
AX h -.(-.p A (AG)), so AX h ^((99 A (AG)) V (^99 A (AG))) and AX h -.((^ A (AG)) V (^99 A (AG))) ^ 
-•(AG). Hence, by MP', AX I — {AG). This is a contradiction, since G C J 7 and J 7 is AX-consistent. 

Suppose that J 7 U {99} is AX-consistent (the other case is completely analogous). Since J 7 is a maximal 
AX-consistent subset of D 2 and 99 £ D 2 , we have 99 £ J 7 . And since J 7 U {-■99} is not AX-consistent, 

For (2), we first show that exactly one of J 7 U {99 = i}, for i = {0, 1/2, 1}, is AX-consistent. Suppose 
that J 7 U {99 = i} and J 7 U {99 = j}, i 7^ j, are AX-consistent. Then 99 = i £ T and 99 = j £ J 7 . By axiom 
Pll, AX I — 1(99 = i A 99 = j). This is a contradiction, since J 7 is AX-consistent. 

Next, suppose that none of J 7 U {99 = i} is AX-consistent. Then there exist finite sets Fj C J 7 such that 

AX I 1(99 = i A (AFi)), i = 0, 1/2, 1. Let G = Fq U Fi/ 2 U Fi. By classical prepositional reasoning, 

AX I 1(99 = i A (AG)), and AX h ^((99 = A (AG)) V (99 = 1/2 A (AG)) V (99 = 1 A (AG))). Now 

using axiom Pll, we have AX I — '(AG). This is a contradiction, since G C J 7 and J 7 is AX-consistent. 

Let i* be the unique i such that J 7 U {99 = i*} is AX-consistent. Since J 7 is a maximal AX-consistent 
subset of D 2 and 99 = i* £ D 2 , we have that {99 = i*} £ J 7 . And since T is AX-consistent, it is clear by 
Pll, that if j / %*, then {99 = j} <£ J 7 . 

For (3), by part (1), if ip £ T, then -up £ J 7 . Thus, {ipi, . . . ,ip k ,^ip} C JF. But since AX3 h 

991 A . . . A ipk ^ ip, by classical prepositional reasoning, AX3 I 1(991 A ... A 99^ A -up), a contradiction 

since J 7 is AX-consistent. 

The proof of the remaining properties follows easily from parts (2) and (3). For example, for part (4), if 
(99 A ip) = 1 £ J 7 , then the fact that 99 = 1 £ J 7 and ip = 1 £ F follows from P5 and (3). We leave details 
to the reader. | 

A formula 99 is said to be satisfiable in a structure M if (M, s) \= ip for some world in M; ip is satisfiable 
in a class of structures M if it is satisfiable in at least one structure in J\f. Let Mp be the class of all 3-valued 
prepositional HMS models. 
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Lemma B.5: If p = i is AX^-consistent, then <p = i is satisfiable in M.p,for i £ {0, 1/2, 1}. 



Proof: We construct a special model M c <G Mp called the canonical 3-valued model. M c has a state sy 
corresponding to every V that is a maximal AX3-consistent subset of D 2 . We show that 



Note that this claim suffices to prove Lemma B.5 since, by Lemma B.3, if p = i is AX3-consistent, then 
it is contained in a maximal AX 3 -consistent subset of D 2 . We proceed as follows. Let M c = (£, it), where 
X = {sy ■ V is a maximal consistent subset of D 2 } and 



Note that by Lemma B.4(2), the interpretation tt is well defined. 

We now show that the claim holds by induction on the structure of formulas. If ip is a primitive propo- 
sition, this follows from the definition of 7r(sy, ip). 

Suppose that ip = -<p. By Lemma B.4(7), (-><£>) = 1 G V iff p = G V. By the induction hypothesis, 
(p = € V iff (M c ,sy) \= p = 0. By the semantics of the logic, we have (M c ,sy) \= ip = iff 
(M c , sy) |= an d the latter holds iff (M c , sy) \= = 1- Similarly, using Lemma B.4(6), we can 

show (-i<^) = G V iff (M c , sy) |= = 0. The remaining case ip = 1/2 follows from the previous 

cases, axiom Pll, and the fact that (M c , sy) |= ip = i for exactly one i G {0, 1/2, 1}. (For all the following 
steps of the induction the case ip = 1/2 is omitted since it follows from the other cases for exactly the same 
reason.) 

Suppose that ip = ipx A p>2- By Lemma B.4(4), ip = 1 € V iff y?i = 1 € V and </?2 = 1 € 
V. By the induction hypothesis, <pj = 1 & V iff (M c ,sy) \= <pj = 1 for j € 1,2, which is true iff 
(M c ,sy) |= (ipi A (^2) = 1- Similarly, using Lemma B.4(5), we can show that (p>i A ^2) = G V iff 

(M c ,Sy) |= (^A^) = 0. 

Suppose that ip = <p± <^-> <^ 2 - By Lemma B.4(8), ^ = 1 € F iff either </?i = <E V and </?2 = 1/2 ^ l 7 ; 
or ipi = 1/2 G V; or (p± = 1 G V and (^2 = 1 £ V". By the induction hypothesis, this is true iff either 
(M c ,sy) \= <p! = and (M c ,s v ) ^ p> 2 = 1/2; or (M c ,s v ) \= Vl = 1/2; or (M c ,s v ) \= ^ = 1 
and (M c ,sy) |= <^ 2 = 1. This, in turn, is true iff (M c ,sy) \= -npi and (M c ,sy) \= ->((p2 = 1/2); or 
(M c , sy) |= ((^1 = 1/2); or (M c , s v ) \= <p x and (M c , sy) |= ip 2 . By the semantics of this holds iff 
(M c ,sy) \= (p> ^ ip) = 1. Similarly, using Lemma B.4(9), we can show that (ip ■—> ip) = € V iff 

(M c , S y) |= {tp^ip) =0.| 

We can finally complete the proof of Theorem B.2. Suppose that pi is valid. This implies {tp = 0) V {p> = 

1/2) is not satisfiable. By Lemma B.5, (ip = 0) V (ip = 1/2) is not AX,3-consistent, so AX3 I <((p = 

0) V {<p = 1/2)). By axioms P0-P4, Pll and MP', AX 3 h <p = 1. And finally, applying Rl, AX 3 h 99. So, 
the axiomatization is complete. | 

C Proofs of Theorems 

In this section, we provide proofs of the theorems in Sections 3 and 4. We restate the results for the reader's 
convenience. 

The next lemma, which is easily proved by induction on the structure of formulas, will be used through- 
out. We leave the proof to the reader. 



(M c , sy) \= p = j iff ip = j£V, for j G {0, 1/2, 1}. 
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Lemma C.l: If M G H n ($), *' C * C $, s G *, s' = p*,*'(s), ^ G and (M, s') \= tp, then 

(M,s)\=tp. 

Theorem 3.2: Let C be a subset of{r, t, e}. 

(a) If M = (E, /Ci, . . . , /C n , 7r, {p$/ ^ : ^ C C $}) G 7^„($), then there exists an awareness 
structure M' = ,K.^'y,Ai,. .., An) G M^ 9 ^) such that, for all p G ?/ 

s£S$ and $ v C <!/, f/ien (M, s) |= <p iff (M 1 , s) \= tpx- Moreover, if C n {t, e} / 0, fnen we can 
rate M' G A^'P d . 

(fcj 7f M = (E, /Ci, . . . , /C n , 7r, v4i, . . . , Ai) G A/^' pd ($), ?nen ?nere exz'sta an //MS structure M' = 
(S'./Ci,..., /C^tt 7 , {p*/,* : * C *' C $}) G such that Y,' = E x 2*. 5* = E x {*} 

/orafl * C and, for all cp G C dien (M,s) |= <p x iJ(M', (s,*)) |= p. If 

{t, e} n C = 0, tfien ?/ze resid* no/ds even if M G (M r ^ P9 (^>) - N£> pd (<f>)). 

Proof: For part (a), given M = (E, Ki, . . . , K. n , ir, {p*/,« : * C C $}) G let M' = 

(E, . . . , JC' n , tt',Ai,..., A n ) be an awareness structure such that 

• n'(s,p) = ir(s,p) if 7r(s,p) / 1/2 (the definition of ir' if 7r(s,p) = 1/2 is irrelevant); 

• K.'i(s) = K-i(s) if /Q does not satisfy Generalized Reflexivity, and Kf^s) = /Q(s) U {s} otherwise; 

• if 7^ K-i(s) C 5^ or if /Q(s) = and s£5$, then A(s) is the smallest set of formulas containing 
^ that is propositionally generated. 

By construction, M' G Af^ ,P9 (^). It is easy to check that if C n {i, e} 7^ 0, then agents know what they are 
aware of, so that M' G N% > pd (<S>). 

We complete the proof of part (a) by proving, by induction on the structure of p, that if s G Sy and 
<&ip C ^, then (M, s) |= p iff (M',s) \= px- If V 9 i s either a primitive proposition, or p = ->ip, or 
p = tpi A P2, the result is obvious either from the definition of ir' or from the induction hypothesis. We 
omit details here. 

Suppose that tp = Kitp. If (M,s) \= Kitp, then for all t G /Q(s), (M,i) \= tp. By the induction 
hypothesis, it follows that for all t G /Q(s), (M',t) \= tp. If /Q satisfies generalized reflexivity, it easily 
follows from Lemma C.l that (M, s) \= tp so, by the induction hypothesis, (M',s) \= tp. Hence, for 
all t G JCi(s), (M',t) |= tp, so (M',s) \= K^. To show that (M',s) \= X^, it remains to show that 
(M',s) \= Aitp, that is, that tp G Ai(s). First suppose that / /C,(s) C S 1 *. Since (M,t) |= V for all 
i G /Cj(s), it follows that ^ is defined at all states in JCi(s). Thus, C ^, for otherwise a simple induction 
shows that tp would be undefined at states in Sy. Hence, C Ai(s). Since awareness is generated by 
primitive propositions, we have tp G Ai(s), as desired. Now suppose that tCi(s) = and s G S*. By 
assumption, = $^ C ^ C A(s), so again tp G 

For the converse, if (M's) \= X; t tp, then (M',s) \= K{tp and tp G By the definition of A4, 

JCi(s) C where C Since (M',a) |= K { tp, (M',t) \= tp for all t G /Cj(a). Therefore, by the 
induction hypothesis, (M, t) \= tp for all i G /Q(s), which implies (M, s) |= iiQ^', as desired. 

For part (b), given M = (E, K u . . . , JC n , vr, A u . . . , A n ) G N^ pd (<5>), let M' = (S', £[,..., K' n , vr', 
{p*',« : * C C $}) be an HMS structure such that 

• E' = E x 2*; 

• S|=Sx {^} for ^ C $; 
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• 7r'((s, ^),p) = 7r(s,p) if p G ^ and 7r'((a, ^),p) = 1/2 otherwise; 

• /C-((s, *)) = {(t, \£ n ^j(s)) : t G /Q(a)}, where *j(a) = {p:pG Ai(s)} is the set of primitive 
propositions that agent i is aware of at state s; 

• p*,^((s,*')) = (5,*). 

Note that since agents know what they are aware of, if t G /Q(s), then VPj(i) = ^(a). 

We first show that M' satisfies confinedness and that projections preserve knowledge and ignorance. 
Confinedness follows since /C^((a, *)) C 5^n*;(s)- To prove projections preserve knowledge, suppose 
that ^1 C ^ 2 C * 3 and /Q((a,* 3 )) C S^ 2 . Then f 2 = *3 n *;(a) and *i = *i D ^(a). Thus 
P*2,*i(^i((a,*3))) = = MsHfits)) G /Cj((a,tf 3 ))} = {(t,*i) : * € /Q(a)}. Similarly, 

^i(p*3,*i( s ) ^3)) = {(*) ^1 n *»( s )) : t e ^Q( s )}- Therefore, projections preserve knowledge. 

To prove that projections preserve ignorance, note that /C^(p^/ j ^(s, *')) = /C^((a, *)) = {(i, * n 
: t G /Ci(s)} and = {(*,*' n : i G ^(a)}. If (s, G (£j((a, tf'))) T . then 

*' n #;(a) C Since * C it follows that * n *i(s) C Hence (a, G (^(p*/^(s, *'))) T - 
Therefore, projection preserves ignorance. 

We now show by induction on the structure of ip that if <J> V C ^, then (M, a) \= ipx iff (Af', (a, \I>)) |= 
<p. If <p is a primitive proposition, or ip = ->ip, or ip = ipi A <p2> the result is obvious either from the definition 
of 7r' or from the induction hypothesis. We omit details here. 

Suppose that ip = K^>. If (M', (a, *)) |= tf^, then for all (t, * n **(a)) G /Cj((s, *)), (M', (t, * n 
N "0- By the induction hypothesis and the definition of K,\, it follows that for all t G /Q(a), 
(M, t) |= Y>, so (M, a) \= /QV- Also no te that if (M', (t, * n *i(s))) |= V, then Y> is defined at all states in 
-S^n^ifs)' an d therefore at all states in <SW S ). Hence, <I>^ C ^(a) C «4j(s). Since awareness is generated 
by primitive propositions, ip G Ai(s). Thus, (M, s) |= Aiip, which implies that (M, a) |= X^, as desired. 

For the converse, suppose that (M, a) |= and C Then (M, a) |= /Q^> and ?/> G Since 
V> G Ai(s), C *j(s). Hence, C n *i(a)). (M,s) \= Kiip implies that (M,t) \= ip for all 
t G /Q(s). By the induction hypothesis, since <Jty C ^, (M', (i, VP)) |= ip for all i G /Q(s). Since C 
(vt n *i(a)), by Lemma C.l, it follows that (M', (t, * n *;(a))) |= Y> for all (t, * n *;(a)) G /C<((s, *)). 
Thus, (M', (a, *)) |= if^* as desired. 

We now show that M' G H%{$). If JCi is reflexive, then n *j(a)) G /C^((a,*)), so (a,*) G 
(/C^((s, *)))^. Thus, M' satisfies generalized reflexivity. Now suppose that JCi is transitive. If (s',^> n 
*i(a)) G m{s, *)), then a' G /Q(s) and ^((a', * n ^(a))) = {(t, * n ^(a) n : i G K t (s')}. 

Since agents know what they are aware of, if s' G /Cj(a), then *j(a) = ^(a'), so /C-((s', * n *j(a))) = 
{(*, * n *j(a)) : t G /Cj(a')}. Since /Cj is transitive, /Q(a') C ^(a), so K,{((s', * n *i(a))) C K,{((s, *)). 
Thus, M' satisfies part (a) of stationarity. Finally, suppose that /Q is Euclidean. If (s',^f n ^i(s)) G 
/^((a, *)), then a' G ^(a) and /Cj((a', * n = {(*, * n *j(a) n *i(a')) : * G ^(«')}- Since a § ents 

know what they are aware of, if a' G /Q(s), then ^(a) = *j(a'), so ^((a', *n^(a))) = {(t,*n*,(a)) : 
t G /Q(a')}. Since /C, is Euclidean, K.-{s') 2 ^(a), so /Cj((a', *n*j(a))) D /C^((a,^)). Thus M' satisfies 
part (b) of stationarity. 

If {t, e} n C = 0, then it is easy to check that the result holds even if M G (A/^' P9 ($) - A^' pc! ($)), 
since the property that agents know what they are aware of was only used to prove part (a) and part (b) of 
stationarity in the proof. | 

Corollary 3.3: If C C {r, t, e} then 

(a) if C n {t, e} = 0, then <p is weakly valid in 7i^(<l>) iff (px is valid in Nn' P9 (&)- 

(b) ifCn {t, e] ^ 0, then <p is weakly valid in 7^(<E>) iff fx is valid in J\f£>P d ((f>). 
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Proof: For part (a), suppose that ipx is valid with respect to the class of awareness structures M^' P9 (^) 
where awareness is generated by primitive propositions and that ip is not weakly valid with respect to the 
class of HMS structures H^(^). Then -^p is true at some state in some HMS structure in 7^(<E>). By 
part (a) of Theorem 3.2, -xpx is also true at some state in some awareness structure where awareness is 
generated by primitive propositions, a contradiction since ipx is valid in JV^' P9 (^). 

For the converse, suppose that p is weakly valid in H„ ($) and that ipx is not valid with respect to the 
class of awareness structures M^ ,P9 {^). Then -xpx is true at some state in some awareness structure in 
N%' P9 {<&). By part (b) of Theorem 3.2, -up is also true at some state in some HMS structure in 7i„ ($), a 
contradiction since ip is weakly valid in 7i„ ($). 

The proof of part (b) is the same except that Nn' P9 (&) is replaced throughout by J\f^' pd (^). | 

Theorem 4.2: Let C be a (possibly empty) subset of{T', 4', 5'} and let C be the corresponding subset of 
{r, t, e}. Then AX%'^ U C is a sound and complete axiomatization of the language £/f'^(<I>) with respect 

to Km 

Proof: Soundness is straightforward, as usual, by induction on the length of the proof (after showing that 
all the axioms are sound and that the inference rules preserve strong validity). We leave details to the reader. 

To prove completeness, we first define a simplified HMS structure for n agents to be a tuple M = 
(S, /Ci, . . . , /C n , 7r). That is, a simplified HMS structure is an HMS structure without the projection func- 
tions. The definition of |= for simplified HMS structures is the same as that for HMS structures. (Recall 
that the projections functions are not needed for defining |=.) Let H^i®) consist of all simplified HMS 
structures for n agents over <J> that satisfy confinedness. 

Lemma C.2: AX^"'^ is a sound and complete axiomatization of the language C^'^i^) w ^ m respect to 

Proof: Again, soundness is obvious. For completeness, it clearly suffices to show that every AX^-'""*- 
consistent formula is satisfiable in some structure in H~ . As usual, we do this by constructing a canonical 
model M c G H~ and showing that every AX^'^-consistent formula of the form p = i for i G {0, 1/2, 1} 
is satisfiable in some state of M c . Since (M c , s) \= ip iff (M c , s) \= ip = 1, this clearly suffices to prove 
the result. 

Let M c = (£ c ,/q,...,/Q,7r c ), where 

• = {sy ■ V is a maximal AX^-'^-consistent subset D 2 and for all p G (<E> — VP), p = 1/2 G V, 
and for all p G (p = 1/2) £ V}; 

• s c = u^C'jxS'vi,; 

• iq(s v ) = {s w : V/Ki C W}, where V/K t = {ip = 1 : K iV > = 1 G V}; 



TT C (s V ,p) 



l if P =leV 
o ifp = oeV 

1/2 Hp=l/2€V. 



Note that, by Lemma B.4(2), the interpretation ir c is well defined. 
We want to show that 

(M c , s v ) (= V = j iff = j G V, for j G {0, 1/2, 1}. (1) 

We show that (1) holds by induction on the structure of formulas. If ip is a primitive proposition, this 
follows from the definition of ir c (sv, ip)- If ip = or ip = tpi A 992 or ip = p\ <^-> ip 2 , the argument is 
similar to that of Lemma B.5, we omit details here. 
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U ip = Knp, then by the definition of V/Ki, if ip = 1 G V, then 99 = 1 G V/Ki, which implies that if 
svk £ ^i( s ^)> tnen ^ = 1 € W- Moreover, by axiom Bl, 99 = 1/2 ^ V. By the induction hypothesis, this 
implies that (M c , sy) |= ^(99 = 1/2) and that (M c , s w ) \= f for all W such that s w G K^(s v ). This in 
turn implies that (M c , sy) [= ^99. Thus, (M c , sy) |= (^99) = 1, i.e., (M c , s v ) \= ^ = 1. 

For the other direction, the argument is essentially identical to analogous arguments for Kripke struc- 
tures. Suppose that (M c , sy) \= (Knp) = 1. It follows that the set (V/Ki) U {^(99 = 1)} is not AX^'""*- 
consistent. For suppose otherwise. By Lemma B.3, there would be a maximal AX^" '""'-consistent set W 
that contains (V/Ki) U {-<(<p = 1)} and, by construction, we would have s\y £ /C^(sy). By the induction 
hypothesis, (M c ,s\y) V= (p = 1), and so (M c ,s\v) V= *P- Thus, (M c ,sy) ^ ^99, contradicting our 
assumption. Since (V/Ki) U {~<(<p = 1)} is not AX^' W -consistent, there must be some finite subset, say 
{cpi, ipk, ""'(v 3 = 1)}, which is not AX^'"^ -consistent. By classical propositional reasoning (which can 
be applied since all formulas are in D2), 

AX^ (<p 2 ^(<p= I))))- 

By Gen, 

AX* h ^(^ (... - (<p = 1))))). (2) 

Using axiom K' and classical propositional reasoning, we can show by induction on k that 

AX^ h ^(^^(^^(...^(^^(^ = 1)))))^ (3) 
(iv^i ^ (^2 — (.- — (Ki<p k (^(99 = 1)))))). 

Now by MP' and Equations (2) and (3), we get 

AX* h (i^i ^ (^2 ^ (••• ^ (#i¥>* ^ = I))))))- 

By Lemma B.4(10), it follows that 

K m (i^ 2 — (... (K^ fe (^(99 = 1))))) G V. 

Since 991, 99^ G V/Ki, there exist formulas ai, . . . , a k such that 99^ has the form = 1, for i = 1, . . . , k. 
By definition of V/.fQ, (K iai ) = 1, (i^afc) = 1 G V. Note that, by Prop', AX^ h ay (ay = 1). 
So, by Gen, K', Prop', and MP', AXf >^ h K iaj ^ K^ctj = 1). Thus, K iaj ^ K^aj = 1) G V. 
Another application of Prop' gives that AX*' W h ((Kiaj) = 1 A (-fQay ^(ay = 1)) Ki(aj = 1). 
Since (iiQaj) = 1 A (Kiaj <^-> Ki(aj = 1) G V, it follows that K { (aj = 1) G V; i.e., iv"^ G V. Note 
that, by Prop', AX*' W h (/? A (/3 <^-> 7)) 7. By repeatedly applying this observation and Lemma B.4(3), 
we get that K^ip = 1) G V. Since, (M c , s v ) \= (K^p) = 1 implies (M c , sy) ^ 99 = 1/2, it follows by 
the induction hypothesis that 99 = 1/2 ^ V. Therefore (99 = V 99 = 1) G V, so by axiom B2 and Lemma 
B.4(3), (Kiip) = 1 G V, as desired. 11 

Finally, by axiom Bl and Lemma B.4(3), (Knp) = 1/2 G V iff 99 = 1/2 G V. By the induction 
hypothesis, 99 = 1/2 G V iff (M c ,s v ) \= 99 = 1/2. By the definition of |=, (M c ,sy) |= 99 = 1/2 iff 
(M c ,s v ) \=Knp = 1/2. 

This completes the proof of (1). Since every AX^'^* -consistent formula 99 is in some maximal AX^- 
consistent set, 99 must be satisfied at some state in M°. 

It remains to show that M c satisfies confinedness. So suppose that sy G S^,. We must show that 
fci(sv) Q Sq,/ for some *' C ^. This is equivalent to showing that, for all sw,sw £ K-i( s v) an d all 

11 This proof is almost identical to the standard modal logic proof that (M, sv) \= Kap implies Knp e V [Fagin, Halpern, 
Moses, and Vardi 1995]. 
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primitive propositions p, (a) (M c , sw) \= P = 1/2 iff {M c , sw>) \= P = 1/2 and (b) if (M c , sy) \= P = 
1/2, then (M c , siy) \= p = 1/2. For (a), suppose that sw, sw' £ ^Q(s) and (M c , sy) N P = 1/2- Since 
sjy £ K-i( s v), we must have (M c , sy) \= ->-£Q((p V ->p) = 1). V contains every instance of Conf2. Thus, 
by (1), (M c , sy) \= -^Ki(p = 1/2)^ Ki((p V ->p) = 1). It follows that (M c , sy) \= K^p = 1/2). Thus, 
(M c ,s\v) \= p = 1/2, as desired. For (b), suppose that (M c ,sy) \= p = 1/2. Since V contains every 
instance of Confl, it follows from (1) that (M c , s v ) \= p = 1/2 ^ Ki(p = 1/2). It easily follows that 
(M c , Sw )\=p= 1/2. Thus, M c G H", as desired. 

To finish the proof that AX^'"^ is complete with respect to H~(&), suppose that ip is valid in H~(&). 
This implies that (ip = 0) V (ip = 1/2) is not satisfiable, so by (1), (p = 0) V (p = 1/2) is not AX^' W - 
consistent. Thus, AX^ h -.((p = 0) V (<p = 1/2)). By Prop' and MP', it follows that AX^ > w h <p = 1 
and AX^'^* h 99, as desired. | 

We now want to show that there exist projection functions p^,, ^ such that (E c , /Cf , . . . , /C£, 7r c , {p^, ^ : 
C vE»' C <£}) g H n (<E>). The intention is to define p\, ^ so that p^, ^(sy) = s\y, where s^y € 5£ and 
agrees with sy on all formulas in C^'^(^>). (We say that sy agrees with s\y on p if (M c , sy) \= p iff 
(M c , sy/) \= But first we must show that this is well-defined; that is, that there exists a unique W with 
these properties. To this end, let Rq,/^ be a binary relation on states in E c such that Rqr/ ,^(sy, s\y) holds if 
sy G S 1 ^,, s\y £ Sy, and sy and sw agree on formulas in £^-' w (\l/). We want to show that R^i ^ actually 
defines a function; that is, for each state sy G S^,, there exists a unique sw G 5£ such that /^/^(sy, ^wO- 
The following lemma proves existence. 

Lemma C.3: If^ C vl/', then for all sy G S^,,, f/iere ex/sto s^y £ smc/i ?/ia? i?*',*(sy, sw) holds. 

Proof: Suppose that sy G S^,,. Let V* be the subset of V containing all formulas of the form p = 1, 
where p contains only primitive propositions in ty. It is easily seen that V$ U {p = 1/2 : p £ ^} is 
AX^'^-consistent. For suppose, by way of contradiction, that it is not AX^'^-consistent. So, without 
loss of generality, there exists a formula ip such that ip = 1 €. V$ and AX^"'^ h p\ = 1/2 <—> (p2 = 
1/2 --►(... (p fc = 1/2 -.(V> = 1)))), where ft + Pj for i / j and pi,...,p k € ($ - By 
Lemma C.2, it follows that K~ |= pi = 1/2 ^ (p 2 = 1/2 ^ (. . . ^ (p fc = 1/2 -i(ip = 1)))). It 

easily follows that 7i.~ \= ->(ip = 1). Applying Lemma C.2 again, we get that AX^"'^ I >(ip = 1). This 

is a contradiction, since ip = 1 G V and V is a maximal AX^ -consistent subset of D2. It follows that 
Via U {p = 1/2 : p ^ is contained in some maximal AX^'^-consistent subset IT of L>2- So sy and 
sw agrees on all formulas of the form ip = 1 for p G £^'^(\I>) and therefore agree on all formulas in 
C^'^(^), i.e., Rx 5 ,>^(sy, sw) holds. | 

The next lemma proves uniqueness. 

Lemma C.4: If^ C \I>', then for all sy G S^,, sw, $w' £ "S 1 ^. ifRw,w(sv, sw) and i?*',*(sy, s^y') ^ort 
/ioW, W = W. 

Proof: Suppose that i?*' ; *(sy, s^y) and iZ*' ; *(sy, sw 1 ) both hold. We want to show that W = W . 

Define a formula ip to be simple if it is a Boolean combination of formulas of the form p = k, where p is 
implication-free. It is easy to check that if p is implication-free, since sw £ then (M c , sw) \= <P = 1/2 
iff <E> V — ^ 0; the same is true for sw 1 - Moreover, if C then sw and s^y' agree on p. Thus, it 
easily follows that sw and s^y' agree on all simple formulas. We show that W = W by showing that every 
formula is equivalent to a simple formula; that is, for every formula p G D2, there exists a simple formula 
p' such that Tin \= p # <p'. 

First, we prove this for formulas p of the form ip = k, by induction on the structure of ip. If Y> is a 
primitive proposition p, then p is simple. The argument is straightforward, using the semantic definitions, 
if ip is of the form -up', ipi A ip2, or ipi <^-> ^2- 
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If tp has the form Kitp', we proceed by cases. If k = 1/2, then the result follows immediately from 
the induction hypothesis, using the observation that TC~ |= Kiip' = 1/2 # tp' = 1/2. To deal with the 
case k = 1, for C define 0^$, = A pe $'((P v ~"P) = 1) A Ape(*^-*')i> = V 2 - B y the indu ction 
hypothesis, tp' = 1 is equivalent to a simple formula ■0". Moreover, ?//' is equivalent to V^'c*^ (V 7 " Acres'). 
Finally, note that i//' A cr^, $/ is equivalent to a formula where each subformula £ = k of ^" such that 

— ^ is replaced by T if fc = 1/2 and replaced by _L if k / 1/2; each subformula of the form 
£ = 1/2 such that C is replaced by _L. Thus, tp" A <7^ ; $/ is equivalent to a formula of the form 
Vv A £J^ $', where ip$> is simple, all of its primitive propositions are in <!>', and all of its subformulas have 
the form £ = or £ = 1. Let cr^, = A p g$'((P v ""P) = !) and let <^,*' = A P e(^-*')(P = V 2 ) ( so that 
cr^, $' = ct^ $ , A cj^ An easy induction on the structure of a formula shows that tp& A crj $ , is equivalent 
to £' = 1 Ad^,, where £' is an implication-free formula. Finally, it is easy to see that £' = 1 A cr^^, is 
equivalent to a formula £^, = 1, where £$, is implication-free. To summarize, we have 



n~\=tp' = i^ \/ (^ = iav). 

It easily follows that we have 

W" |= K^' = 1) # Ki I \/ (& = 1 A a^,) I . (4) 

It follows from confinedness that 

\=K t i \/ (& = 1 A a^,) I # V = 1 A <^,*')- (5) 

Since T~L~ \= K^ipi Aip 2 )^ ^QY>i A K^ 2 and H~ |= £ = 1/2 # JQ(£ = 1/2), it follows that 

H r T h= Ki(& = 1 A o^v) # = 1) A <r^,. (6) 

Finally, since |= = 1) # ifj£ = 1, we can conclude from (4), (5), and (6) that 

n- |= (i^vO = i - (^ao = i a a- $ „ 

and hence K^tp' = 1 is equivalent to a simple formula. 

Since = is equivalent to ->(Kiip = 1) A ->(Kiip = 1/2), and each of K^tp = 1 and Kitp = 1/2 
is equivalent to a simple formula, it follows that Kitp = is equivalent to a simple formula. 

The arguments that -iipi, ^ A 1^2. ^1 ^ 4>2, and K^ipi are equivalent to simple formulas if ipi and 
V>2 are follows similar lines, and is left to the reader. It follows that every formula in D 2 is equivalent to a 
simple formula. This shows that W = W', as desired. | 

It follows from Lemmas C.3 and C.4 that Rq,^> defines a function. We take this to be the definition of 
P% We now must show that the projection functions are coherent. 

Lemma C.5: If^ 1 C ^ 2 C * 3 , then p% 3 ^ 1 = P% 3 ^ 2 P% 2 ^ 1 - 

Proof: If s v e Sy 3 , we must show that p^^^sy) = P% 2 ^ 1 {p% z ,^ 2 {sy)). Let s w = p% 3 ^ 2 (sy) and 
sx = P% 2 Then s\y and sy agree on all formulas in C^^{^ 2 ) and s\y and sx agree on all 
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formulas in £^"' w (VE'i). Thus, sy and sx agree on all formulas in C^'^^i). Moreover, by construction, 
sx G Sq, 1 . By Lemma C.4, we must have sx = p% 3 ^ 1 (sv)- I 

Since we have now shown that the projection functions are well defined, from here on, we abuse notation 
and refer to M c as (S c , vr c , : * C C $}). To complete the proof of Theorem 4.2, 

we now show that M c satisfies projection preserves knowledge and ignorance. Both facts will follow easily 
from Proposition C.7 below. 

We first need a lemma, which provides a condition for sw to be in JCf(Sv) that is easier to check. 

Lemma C.&. ///C?(sy) C S%, s w G S%, and V/K { n C% >^(¥) C W, then s w G K%(s v ). 

Proof: Suppose that V and W are as in the antecedent of the statement of the lemma. We must show that 

V/Ki C W. 

First note that V/Ki is closed under implication. That is, if <pi = 1 G V/Ki, and AX^ h <pi <^-> 992, 
then 922 = 1 £ V/Ki. This follows from the observations that if AX^"'^ h 991 <^-> 932, then AX^'^ h 
-fQ(<Pi ^ ^2), and AX^"'^ h <^-> Knp 2 ; so, by Prop', AX^"'^ h (.fQtpi ^^2) = 1- Thus, 

(Kiifi <^-> Kitp?) = 1 € V. Moreover, since 991 = 1 G V/Ki, we must have -fQ^i = 1 G V. Finally, by 
Prop', AXf > w h (K^i = lA^j^i JQ<p 2 ) = 1) ^ iv"^ 2 = 1. Thus, Lemma B.4(3), iv"^ 2 = 1 G V. 
So (f2 = 1 G W/Ki, as desired. By Lemma B.4(3), W is also closed under implication. Thus, by the proof 
of Lemma C.4, it suffices to show that 99 = 1 G W for each simple formula 99 such that Knp = 1 G V. 
Indeed, we can take 99 to be in conjunctive normal form: a conjunction of disjunctions of formulas of basic 
formulas, that is formulas of the form tp = k where tp is implication-free. Moreover, since by Lemma B. 4(4), 
W is closed under conjunction (991 G W and 992 G W implies that 991 A 992 G W) and it is easy to show 
that V/Ki is closed under breaking up of conjunctions (if 991 A 992 G V/Ki then 99j G V/Ki for i = 1, 2), 
it suffices to show that tp = 1 G W for each disjunction tp of basic formulas such that Kitp = leV. We 
proceed by induction on the number of disjuncts in tp. 

If there is only one disjunct in tp, that is, tp has the form tp' = k, where tp' is implication-free, suppose 
first that k = 1/2. It is easy to check that H~ \= (tp' = 1/2) # Vpe* ,(p = V 2 ) and ?C H = 
1/2) # V P e* , K i(P = V 2 )- Since (^(^' = 1/2)) = 1 € V, by Prop' and Lemma B.4(3) /^(^ = 
1/2) G V and iQ(p = 1/2) G V for some p G (since, by Lemma C.2, for all formulas a, we have 
cr G V iff (M c , sy) |= a). Since /Cf (s y ) C S%, it must be the case that K^p = 1/2) G V iff p £ Since 
s^y G S^, p = 1/2 G W. Since W is closed under implication, tp' = 1/2 G W, as desired. If A; = or 
fc = 1, then it is easy to see that ip = 1 G V/Ki only if tp = 1 G £^"' C ^( X I / ) so, by assumption, ^ = 1 G W. 

If ^ has more than one disjunct, suppose that there is some disjunct of the form tp' = 1/2 in tp. If 
there is some p G (<&,/,/ — VP) then, as above, we have ivj(p = 1/2) G V and p = 1/2 G W, and, thus, 
tp' = 1/2 £ W. Therefore, tp = 1 G W. If there is no primitive proposition p G — VP), then 
(M c , s v ) \= Ki(tp' ^ 1/2) = 1, and thus (?/>' / 1/2) = 1 G V/.FQ. It follows that if tp" is the formula 
that results from removing the disjunct tp' = 1/2 from tp, then tp" G V/Ki. The result now follows from 
the induction hypothesis. Thus, we can assume without loss of generality that every disjunct of tp has the 
form tp' = or tp' = 1. If there is some disjunct tp' = k, k G {0, 1}, that mentions a primitive proposition 
p such that p ^ then it is easy to check that K { (tp' = 1/2) G V. Thus, (tp' = 1/2) = 1 G V/Ki. Again, 
it follows that if tp" is the formula that results from removing the disjunct tp' = k from tp, then tp" G V/Ki 
and, again, the result follows from the induction hypothesis. Thus, we can assume that tp G jC^'^VP). But 
then tp G V/Ki, by assumption. | 

Proposition C.7: Suppose *i C vP 2 , sy G S^, s w = p^^fsy), /C?(sy) C S$, 3 , and JCf(s w ) Q -S| 4 - 
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Proof: By the definition of projection, ^4 C vE^. To show that $4 C suppose that p G ^4. Since 

R{sw) C 5^ 4 , (M c ,s w ) |= i<Q(p V -.p). Since ^4 C #1, by Lemma C.l, (M c ,s v ) \= K^p V -.p). 
Thus, (M c , sy/) |= p V -ip for all sy G ££(sy). Therefore, p € ^3. Thus, ^4 C ^1 n Vl/3. For the opposite 
containment, if p 6 $ifl ^3, then (M c , sy) |= /Q(p V ->p). By definition of projection, since pefi and 
% = Py^y^sv), (M c , s w ) \= Ki(p V -.p). Thus, p G * 4 . It follows that * 4 = *i n tf 3 - 

To show that p% 3 ^ A {K>i (sy)) = /C£(sjy), we first prove that /9| 3i ^ 4 (/C i c (sy)) D /Cf(siy)- Suppose 
that svk' G /Cf(siy). We construct V such that ^ 4 (sy/) = «iy' an d S V G ^i( s v)- We claim that 
V/Ki U {<p = 1 : (p = 1 G W, <p is implication-free} is AX^'^-consistent. For suppose not. Then there 
exist formulas ipi, ip m , tp[, ip' k such that ipj = 1 G V/.fQ for j G {1, m}, is implication-free 
and ip'j = 1 G W for j G {l,...,fe}, and {</?i = 1, ...,<p m = l,ip[ = l,.-,<p k = 1} is not AXf'^- 
consistent. Let ip = (p' ± A ... A Then ^ = 1 G W, so ^ = 1/2 Thus, by axiom Bl and Lemma 
B.4(3), {K^ip) = 1/2 W. By definition of /Cf, {K^ip) = I £ W , for otherwise -.^ = 1 G W. 
By axiom Pll, it follows that (K^ip) = G W. Thus, by Lemma B.4(7), (^K^ip) = 1 G W, so 
(-liiQ-i^) = 1 G V. Thus, there must be some maximal AX^'^-consistent set V" D V/.JQ such that 
(-.^) = 1 £ V". Since s y „ G /Cf(sy) C S$ 3 , tf 4 C * 3 , s w > G 5* 4 , and (-.^) = 1/2 (/ we have 
(^V) = 1/2 ^ V". So, by axiom Pll, (-.^) = G V". Thus, V = 1 G V" and ^ = 1, ip' k = 1 G V", 
which is a contradiction since V" 5 V/#j and V" is AX^ -consistent. Let V be an AX^ -consistent 
set containing V/Ki U {ip = 1 : ip = 1 G W', 97 is implication-free}. By construction, sy/ G /C?(sy). 
Moreover, since (-up) = 1 # <p = is valid in 7Y n and siy/ G S$, 4 , p% ^ 4 (sy) agrees with s^' on all 
formulas of the form ip = k for k G {0, 1/2, 1} and <p implication-free. Therefore, it is easy to show using 
Prop' that they agree on all simple formulas. Thus, by the proof of Lemma C.4, they agree on all formulas 
in £^"'^(^4). By uniqueness of p c , it follows that p\ ^ 4 (sy) = syy', as desired. 

The proof of the other direction p\, ^ 4 (/Cf(sy)) C tCf(sw) is similar. Suppose that sy/ G /C?(sy) 
and sy» = p% z ^, 4 (sy/). We need to prove that sy G K.f(Syy)- We claim that W/Ki U {cp = 1 : 
</? = 1 G V", 97 is implication-free} is AX^'^-consistent. For suppose not. Then there exist formulas 
ipi, <p m , if^, such that ipj = 1 G VF/iv"j for j G {1, m}, is implication-free and tp'j = 1 G 
V" for j G {l,...,/e}, and {<^i = l,...,<^ m = 1,^ = l,...,(/7 ; fc = 1} is not AX^'^-consistent. Let 
Y> = <p[ A ... A <£>' fe . Then ^ = 1 G V", so V = 1/2 ^ V. Thus, by axiom Bl and Lemma B.4(3), 
(Ki-iijj) = 1/2 ^ V. Using Lemmas C.l and C.2, it is easy to show that ijj = 1 G V" implies ^ = 
1 G V, so, by definition of /Cf, (K^ip) = 1 G" V, for otherwise -.^ = 1 G V. By axiom Pll, it 
follows that (Ki-np) = G V. Thus, by Lemma B.4(7), (^K^ip) = 1 G V". But as sy» G 5| 4 , 
ip = 1 e V" implies <I>^ G 5| 4 . Since ^4 C * l5 it follows that ip = 1/2 £ W, thus, by definition 
of projection, we have = 1 G W. Thus, there must be some maximal AX^'^-consistent set 

W 2 W/ifi such that (-.^) = 1 ^ W. Since s W ' G /Cf(s^) C 5| 4 , we have (^V) = V 2 t W. 
So by Pll it follows that (-.V) = G W, so i/> = 1 G W. Thus, ip[ = l,...,(f/ k = 1 G W, which 
is a contradiction since W' 2 W/Ki and W' is AX^'^-consistent. Let W 1 be an AX^'^-consistent set 
containing W/Ki U {</? = 1 : </? = 1 G V", 97 is implication-free}. By construction, s^' G /C?(svk)- 
Moreover, since (-k/j) = 1 # ip = is valid in H n and s\v',sv" £ S 1 ^, sy» agrees with s\y' on all 
formulas of the form ip = k for k G {0, 1/2, 1} and implication-free. Therefore, it is easy to show using 
Prop' that they agree on all simple formulas. Thus, by the proof of Lemma C.4, they agree on all formulas 
in £^ r '^ > (*4). By uniqueness of p c , it follows that sy" = sy/i G fCf(sw), as desired. | 

The following result is immediate from Proposition C.7. 

Corollary C.8: Projection preserves knowledge and ignorance in M°. 

Since projections preserve knowledge and ignorance in M c , it follows that M c G 7Y n ($). This finishes 
the proof for the case C = 0. If T' G C, we must show that M c satisfies generalized reflexivity. Given 



25 



sy G Sy 1 , by confinedness, fZf(sv) C S^, 2 for some ^2 Q ^l- It clearly suffices to show that sw = 
P% 1 ^ 2 ( s v) G /Cf(sy). By Lemma C.6, to prove this, it suffices to show that V/Ki n £^"' c ~ > (* 2 ) C VF. 
If <p = 1 G V/.JQ n £^'^(^ 2 ), then A^ = 1 £ V. Note that Prop' implies that AXf h ^ ^ ^ = 1, 
which by Gen, K', Prop', and MP' implies that AX% h (Aj</? ^ A;(<£ = 1)) = 1. Therefore, as 
(Kip) = leV, by Lemma B.4(8,10), (Aj(<£ = 1)) = 1 G V. By Prop' and Lemma B.4(3), it follows that 
Ki(<f = 1) G V. By T' and Lemma B.4(3), it follows that ip = 1 V V{p: P e*„} *Q(P = V 2 ) G V. But since 
ip G £^-'^(^2), we must have $^ C Moreover, since /C^(sy) C S$, , we must have ->Aj(p = 1/2) G 
V for all p G l I / 2- Thus, it easily follows that ip = 1 G V". Finally, since svk = p|r 1 * 2 ( s v)> we must have 
<y2 = 1 G W, as desired. 

Now suppose 4' G C. We want to show that M c satisfies part (a) of stationarity. Suppose that s\y G 
lCf(sv) and s x G JCf(S w )- We must show that s x G /Q(SV)- If (-*Q¥>) = 1 G V then, by axioms Prop' 
and 4' and Lemma B.4(3), (KiKup) = 1 G V. This implies that (Kiip) = 1 G W, which implies that 
ip = 1 G X. Thus, F/Kj C X and sx G tCf(sv), as desired. 

Finally, suppose that 5' G C. We want to show that M c satisfies part (b) of stationarity. Suppose that 
sw G )Cf (sy) and sx G JCf(sy)- We must show that sx G )Cf(sw)- Suppose by way of contradiction 
that sx ^ K.1(sw), then there exists ip = 1 G W/Ki such that </? = 1 ^ X. p = 1 £ VF/A, implies 
that (A^) = 1 G W, so by Prop', Bl, and Lemma B.4(3) it follows that ip = 1/2 £ VF. By Conf2 it 
can be easily shown that tp = 1/2 ^ X, so by Prop', we get that </? = G X. As in the proof of the case 
T' G C, if (A;</?) = 1 G W, then (A;^ = 1)) = 1 G W. Then it follows that (K^K^ip = 1)) = 1 £ V, 
for otherwise since sjy G (sy) we get that (-<Ki(ip = 1)) = 1 G W. Since (K^K{(p = 1)) G D2, 
it is easy to show that (-.Aj-.Aj(y? = 1)) = 1 G V. By Prop' and 5' and Lemma B.4(8,10), it follows 
that (A;(<£ = 1) V A;((<£ = 1) = 1/2)) = 1 G V. Then using Lemma B .4(5,6,7), it easily follows that 
either (K(p = 1)) = 1 G V or (A;((<£ = 1) = 1/2)) = 1 G V. Then, either (ip = 1) = 1 G X or 
((<£ = 1) = 1/2) = 1 G A, but this is a contradiction since p = 0£l and A is AX^'^-consistent. | 
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